Manifest
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
File: 2615B626807D30988381C32656617AE6FD6638B6.mft (raw, json)
Hash identifier: lqK7CWzCrIeHv+DFrMpTmeAii6zKxwVuJwJIYIZoSqg=
Subject key identifier: 05:06:B7:1A:76:70:A2:D4:B2:92:C4:F9:3C:7F:3C:4F:5A:44:86:85
Authority key identifier: 26:15:B6:26:80:7D:30:98:83:81:C3:26:56:61:7A:E6:FD:66:38:B6
Certificate issuer: /CN=2615b626807d30988381c32656617ae6fd6638b6
Certificate serial: 0409A2DBC7E29EDF2489E6518F2F51D42EB8112C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
Manifest number: 023A
Signing time: Fri 23 Oct 2026 23:05:36 +0000
Manifest this update: Fri 23 Oct 2026 23:00:36 +0000
Manifest next update: Sun 25 Oct 2026 02:52:36 +0000
Files and hashes: 1: AS209710.asa (hash: uOB5Z3Fmg18HMKsvzyzZbGRRD3+2nlkihW02xag7eqw=)
2: 2615B626807D30988381C32656617AE6FD6638B6.crl (hash: y3kDf87iuu3T2SPK1fNBl1CM6r9AWCBrSbvX+gu8Us0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.crl
rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 02:52:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:09:a2:db:c7:e2:9e:df:24:89:e6:51:8f:2f:51:d4:2e:b8:11:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2615b626807d30988381c32656617ae6fd6638b6
Validity
Not Before: Oct 23 23:00:36 2026 GMT
Not After : Oct 25 02:52:36 2026 GMT
Subject: CN=0506B71A7670A2D4B292C4F93C7F3C4F5A448685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:60:94:dd:82:3b:20:41:24:35:a4:4b:fb:
9d:9e:ba:51:ad:9d:22:c2:24:16:c0:f9:17:4b:54:
9a:19:2b:dd:ea:ab:fe:c8:a2:ec:ce:2f:77:82:2d:
83:40:f8:28:f6:58:b9:df:f0:75:f3:fa:38:1c:99:
41:93:05:6e:36:9d:f8:a5:01:b2:d2:79:b0:92:6d:
d6:89:d6:f5:1c:26:b8:ed:0f:93:6d:bc:be:90:e1:
20:31:e7:86:fa:ff:94:62:3e:d2:f4:1d:63:b6:de:
33:45:4d:13:b4:77:f9:cd:92:c1:52:49:84:30:c9:
11:bb:b3:cc:71:c9:ef:a4:86:07:22:9d:a5:22:7b:
cc:66:44:9c:fe:5b:8e:e9:40:d6:70:ee:a1:bb:27:
65:cf:c0:2d:fd:b5:26:30:3c:8b:a1:ce:e4:7c:1a:
c3:f3:58:f5:27:1d:e5:ec:43:52:61:fa:6c:94:be:
0f:52:4f:f9:23:e7:f5:e5:43:09:4e:f4:ca:9f:e2:
83:28:31:ca:c7:e4:cb:2a:ed:fd:e5:b4:d9:bb:1b:
1d:f8:89:68:00:91:0e:f5:e9:45:25:2e:a9:66:e8:
35:02:00:3b:5b:57:41:2a:f7:3e:31:7d:88:f2:83:
69:7e:50:d2:2d:95:fa:cf:20:eb:62:c6:5b:c9:c1:
61:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:06:B7:1A:76:70:A2:D4:B2:92:C4:F9:3C:7F:3C:4F:5A:44:86:85
X509v3 Authority Key Identifier:
keyid:26:15:B6:26:80:7D:30:98:83:81:C3:26:56:61:7A:E6:FD:66:38:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhW2JoB9MJiDgcMmVmF65v1mOLY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9ecac413-4cd2-472c-b01e-74458cea386c/1/2615B626807D30988381C32656617AE6FD6638B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:07:e6:2c:7f:3a:e2:ef:eb:5c:a7:7e:52:b9:06:37:de:26:
03:6e:8f:b2:a5:86:01:88:c8:b4:01:41:60:87:c8:95:a9:7a:
7b:cf:00:73:95:66:e2:b2:18:bf:06:4f:34:0c:ec:51:ed:d1:
98:7e:82:55:d3:44:77:32:34:66:51:86:17:4f:ea:b3:f0:5e:
12:11:6c:9c:94:b7:15:e6:7b:50:98:ee:eb:ec:62:7c:8e:2f:
fd:13:84:6a:30:50:1f:49:b5:7b:22:0a:60:18:fd:ac:05:4f:
7d:3d:1c:0a:40:7f:8c:67:be:73:45:77:b1:d9:7d:e4:9f:ea:
58:cf:0a:1f:fb:6b:75:1e:35:e9:d9:11:35:da:cd:23:ac:a6:
f3:81:03:a0:92:9c:99:d8:8b:38:5c:9c:92:59:fa:6d:e4:a0:
35:0b:9d:2c:4f:05:9a:8a:b6:f1:5b:b9:bd:95:d9:cc:37:3e:
af:02:3b:77:63:b5:72:b8:28:32:6c:3f:13:fc:39:1b:ca:3c:
07:26:ea:12:c0:36:a4:07:3f:60:c9:c0:e5:1a:f5:27:8e:b5:
a5:16:be:a5:a4:56:96:3d:5d:20:26:6d:7e:e6:33:c4:5c:3d:
f1:1d:6f:55:ca:96:77:73:74:4a:6e:f0:3b:29:ca:dc:ac:dc:
22:8a:27:8d
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUBAmi28fint8kieZRjy9R1C64ESwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYxNWI2MjY4MDdkMzA5ODgzODFjMzI2NTY2MTdhZTZm
ZDY2MzhiNjAeFw0yNjEwMjMyMzAwMzZaFw0yNjEwMjUwMjUyMzZaMDMxMTAvBgNV
BAMTKDA1MDZCNzFBNzY3MEEyRDRCMjkyQzRGOTNDN0YzQzRGNUE0NDg2ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC16WCU3YI7IEEkNaRL+52eulGt
nSLCJBbA+RdLVJoZK93qq/7IouzOL3eCLYNA+Cj2WLnf8HXz+jgcmUGTBW42nfil
AbLSebCSbdaJ1vUcJrjtD5NtvL6Q4SAx54b6/5RiPtL0HWO23jNFTRO0d/nNksFS
SYQwyRG7s8xxye+khgcinaUie8xmRJz+W47pQNZw7qG7J2XPwC39tSYwPIuhzuR8
GsPzWPUnHeXsQ1Jh+myUvg9ST/kj5/XlQwlO9Mqf4oMoMcrH5Msq7f3ltNm7Gx34
iWgAkQ716UUlLqlm6DUCADtbV0Eq9z4xfYjyg2l+UNItlfrPIOtixlvJwWF1AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUBQa3GnZwotSyksT5PH88T1pEhoUwHwYDVR0j
BBgwFoAUJhW2JoB9MJiDgcMmVmF65v1mOLYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWVjYWM0MTMtNGNkMi00NzJjLWIwMWUtNzQ0NThjZWEz
ODZjLzEvMjYxNUI2MjY4MDdEMzA5ODgzODFDMzI2NTY2MTdBRTZGRDY2MzhCNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0poVzJKb0I5TUppRGdjTW1WbUY2NXYx
bU9MWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZWNhYzQxMy00
Y2QyLTQ3MmMtYjAxZS03NDQ1OGNlYTM4NmMvMS8yNjE1QjYyNjgwN0QzMDk4ODM4
MUMzMjY1NjYxN0FFNkZENjYzOEI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgfmLH864u/rXKd+UrkG
N94mA26PsqWGAYjItAFBYIfIlal6e88Ac5Vm4rIYvwZPNAzsUe3RmH6CVdNEdzI0
ZlGGF0/qs/BeEhFsnJS3FeZ7UJju6+xifI4v/ROEajBQH0m1eyIKYBj9rAVPfT0c
CkB/jGe+c0V3sdl95J/qWM8KH/trdR416dkRNdrNI6ym84EDoJKcmdiLOFyckln6
beSgNQudLE8Fmoq28Vu5vZXZzDc+rwI7d2O1crgoMmw/E/w5G8o8BybqEsA2pAc/
YMnA5Rr1J461pRa+paRWlj1dICZtfuYzxFw98R1vVcqWd3N0Sm7wOynK3KzcIoon
jQ==
-----END CERTIFICATE-----
Generated at Sat Oct 24 11:12:50 2026 by rpki-client